Distribution of Filesize
Monday, January 30. 2006
The following picture shows the distribution of filesize in kilobytes for about 14,000 unique malware samples I have collected during the last few months. Uniqueness is defined in this context as "unique md5sum".
As you can see, there are several spikes, mainly around 190KB, 45 KB, and 10 KB. The picture only shows the filesize between 0 and 250 KB. nepentes also captured some rather large bots (> 1MB) - I wonder how long it takes to infect a computer hanging on a modem line with such a large bot...
If you are interested in samples, please contact me at thorsten [dot] holz [at] gmail.com
Distribution of filesize
As you can see, there are several spikes, mainly around 190KB, 45 KB, and 10 KB. The picture only shows the filesize between 0 and 250 KB. nepentes also captured some rather large bots (> 1MB) - I wonder how long it takes to infect a computer hanging on a modem line with such a large bot...
If you are interested in samples, please contact me at thorsten [dot] holz [at] gmail.com
".
